Disadvantages of J2EE session management in ColdFusion

Question

Manual page tells about bunch of advantages of the J2EE session management (SM) over the ColdFusion SM, but what about other side? Which problems can appear when using J2EE

Answer 1

It is harder to make the cookie HTTPOnly, at least with JRun.

Answer 2

None that I've found, really. As soon as J2EE session management became available I started using it and have had no troubles.

The only problem I had with it was that even if you turn on J2EE session management, if you "setclientcookies" to yes the CFIDE/CFTOKEN cookie pair is created anyway. That caused a problem in my current environment as there is a policy against persistent cookies.

I suppose if you have a need for a session to remain available if the browser is closed and restarted then the J2EE session management isn't for you.